I want to add an iframe but rsfirewall changes the iframe to i-frame how do i stop it doing this

I spent hours and hours trying to figure out what was causing this.....

It does it to iframes and to onmouseover.

I thought it was JCE, then Joomla, but at least i know what is causing it.

Now, to stop it from happening ???

(Edit: I just submitted a ticket and will post fix here when I get a reply)

i have this problem too. how i can stop it? it is problem with RS Firewall?

SOLUTION:

rsfirewall - blacklist/whitelist

Add your IP to the whitelist. This worked for me.

And, directly from the support team:

This is one of the protections available in RSFirewall! against js injections.

You can disable this protection in several ways:

- add the IP you are adding the syntax from to the RSFirewall! Whitelist (this will cause all the component restrictions to not be applied for that IP);

- use the "Exceptions" tab in order to define an exception for the JS protection that will allow you to use the syntax.

Greg

Hi

Does anyone know exactly how you would create an Exception for this?

I have read here: www.rsjoomla.com/support/view-article/779-exceptions.html and made some experiments, none of which work. In the backend article editor, my <iframe> is still becoming <i-frame>.

FYI I am superadmin, I have no-filtering set, and my JCE has Allow Media Iframes = yes.

thanks for any clues

Dex

We have JCE, RS Firewall and Joomla 2.5.8, and with this exception you can once again add an <iframe> to your content:

Exception Type: component
Use RegEx: no
Match: com_content
Skip PHP protections: no
Skip SQL protections: no
Skip JS protections: YES
Skip Upload protections: no
Reason: Allow <iframe> in content
Published: Yes

Thank you very much for your comments, heidi4web. We've also added an article to the FAQ section.

octavian wrote:
thanks for your advice. i think rsfirewall should add some common tag automatically in the component. some user those whos less experience will not face the headache.

My solution:

Didable plugin RS Firewall
Put the iframe code in you're document (html mode)
Publish document
Enable plugin RS Firewall again.
That works for me!
See: www.maatjes.be

Greetings from Belgium!

Hi
What do I add to the exceptions if the iframe is in a module? I have tried various things but it's not working component > modules, component > mod_custom.
I do not have a constant IP so that will not work.

Exception Type: Component
Match: com_modules

The component that's editing the module properties is called "com_modules" and this is what you want to create an exception for.

I've tried adding these exceptions and it's still not working. Anyone run into that? Maybe mines slightly different.
When I edit an article, add iFrame, and save it, the iFrame code shows on the page.However, when I reopen the article it strips out the iFrame before I even open it. It appears to only do this on JCE Editor and not others. The strange thing is I've even tried to whitelist the IP and it's still doing it.

That's actually unrelated to RSFirewall! but to your editor & permissions. You'll notice that if you disable RSFirewall! completely the same thing will happen.

we thought we had this figured out. but it appears to still be a RSFirewall issue (maybe combined with JCE Editor?)

we changed the settings to make sure the user is allowed to add iFrames. we made sure the JCE editor allows iFrames. and when we edit, it's still stripping the iFrame code altogether (not changing to i-Frame). if we disable the RSFirewall then it works.

i did add the com_content and com_module exceptions. i use to use SecureLive and was familiar with their similar solutions. i'm not figuring this one out though. any other thoughts?

I have a similar issue - RSFirewall is changing <object ... to <o-bject ...

But this is not in a component, its in articles - how do I add an exception to stop this happening??

Any help here? I'm starting to have users strip out iFrame code without realizing it. They are just trying to edit articles as normal. I don't really want to disable the firewall until this issue is resolved.

Has anyone found a fix? Can anyone from RSJoomla help us out or is there another place I'm suppose to go for support tickets?

Hey, I followed the instructions from heidi4web and it worked perfectly. Go into the RS Firewall Component and look for the "Exceptions" tab in the list on the left column. Click on Exceptions and then "New." Fill in the data in the form that comes up. You can also do the same thing to list your IP Address. RS Firewall will show your IP address when you are logged into the component.

Go into the Blacklist/whitelist and click "New". Fill in the form with your IP Address.

This was giving me fits the last 48 hours. Glad to have finally found the culprit. And thank you heidi4web.

• Scrambled tags (iframe becomes i-frame)
• RSFirewall! doesn't allow me to add HTML, CSS or JavaScript to an article
• RSFirewall! doesn't allow me to edit my template files
• RSFirewall! doesn't allow me to add HTML, CSS or JavaScript to a module

This thread is now locked as lots of solutions have already been offered.